[TF-A] building secure boot tf-a images without ROTK controlled by SW build engineer

product ROT private key is controlled by KMI team.

our plan is (1) SW build engineer builds tf-a with a temporary development ROT key, save all other generated keys (2) remove fip image and all certificates built, send build images and generated keys to KMI team (3) KMI team uses cert_create to re-generate all certificates with product ROTK (4) KMI team sends all images, certificates, ROTPK hash to SW build engineer (5) SW build engineer uses fiptool to generate final fip image

my question: is there a better way to deal with this situation? (SW build engineer doesn't have control of ROT key)

Thanks

-Xin